CVE-2019-0368

Published: Oct 8, 2019Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD

Description

SAP Customer Relationship Management (Email Management), versions: S4CRM before 1.0 and 2.0, BBPCRM before 7.0, 7.01, 7.02, 7.12, 7.13 and 7.14, does not sufficiently encode user-controlled inputs within the mail client resulting in Cross-Site Scripting vulnerability.

Affected (8)

Products: Sap: Customer Relationship Management Bbpcrm, Customer Relationship Management S4crm

Sap

2 products

Customer Relationship Management Bbpcrm

Customer Relationship Management S4crm

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Sap Customer Relationship Management Bbpcrm	Version 7.01
Sap Customer Relationship Management Bbpcrm	Version 7.02
Sap Customer Relationship Management Bbpcrm	Version 7.0
Sap Customer Relationship Management Bbpcrm	Version 7.12
Sap Customer Relationship Management Bbpcrm	Version 7.13
Sap Customer Relationship Management Bbpcrm	Version 7.14
Sap Customer Relationship Management S4crm	Version 1.0
Sap Customer Relationship Management S4crm	Version 2.0